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ABSTRACT 

This project involves an implementation of the Rivest Shamir 
Adleman (RSA)[1] encryption algorithm in C. It consists of 
generation of two random prime numbers and a number co¬ 
prime to 4i{n) also called euler toitent function. These three 
are used to generate a public key and private key. The user 
has to enter a message which is encrypted by the public 
key. The algorithm also decrypts the generated cipher text 
with the help of the private key and returns the plain text 
message which was encrypted earlier. 

General Terms 

Plain Text: The general message needed to be encrypted is 
called plain text. 

Cipher Text: The Garbage like looking string having no 
information about plain text is called cipher text. 

Keywords 
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1. INTRODUCTION 

This project has been done so that people interested in cryp¬ 
tography, especially students can get a better understanding 
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of how generation of random primes, key generation and en¬ 
cryption and decryption process takes place in RSA. Being 
an undergrad students our search for an easy-to-understand 
C implementation of RSA that involved generation of ran¬ 
dom primes lead no where. On not finding a satisfactory 
implementation, we implemented it. 

2. PUBLIC-KEY CRYPTOSYSTEMS 

In a public key cryptosystem each user places in a public 
file an encryption procedure E. That is, the public file is a 
directory giving the encryption procedure of each user. The 
user keeps secret the details of his corresponding decryp¬ 
tion procedure D. These procedures have the following four 
properties: 

1. Deciphering the enciphered form of a message M yields 
M. Formally, 

D{E{M) = M 

2. Both E and D are easy to compute 

3. By publicly revealing E the user does not reveal an 
easy way to compute D. This means that in practice 
only he can decrypt messages encrypted with E, or 
compute D efficiently 

4. If a message M is first deciphered and then enciphered, 
M is the result. Formally, 

E{D{M) = M 

3. IMPLEMENTATION RSA ALGORITHM 

For Implementation of RSA these four famous algorithms 
have been used: - 

• Sieve of Eratosthenes (for prime number generation) 

• Fermat Primality Test 

• Miller-Rabin Primality Test 

• Encryption-Decryption Algorithms. 


Proper discussion about each algorithm is mentioned in next 
subsections. 



3.1 Sieve of Eratosthenes 

The sieve of Eratosthenes is one of the most efficient ways 
to find all primes smaller than n when n is smaller than 
10 million or so. Following is the algorithm to find all the 
prime numbers less than or equal to a given integer n by 
Eratosthenes method: 

1. Create a list of consecutive integers from 2 to n : (2, 3, 

4,.... , n). 

2. Initially, let p equal 2, the first prime number. 

3. Starting from p, connt up in increments of p and mark 
each of these numbers greater than p itself in the list. These 
numbers will be 2p, 3p, 4p, etc.; note that some of them 
may have already been marked. 

4. Find the first number greater than p in the list that is 
not marked. If there was no such number, stop. Otherwise, 
let p now equal this number (which is the next prime), and 
repeat from step 3. But When the algorithm terminates, all 
the numbers in the list that are not marked are prime. 

3.2 Fermat’s Primality Test 

If p is the number which we want to test for primality, then 
we could randomly choose a, such that a < p and then calcu¬ 
late modulo p. If the result is not 1, then by Fermat’s 
Little Theorem p cannot be prime. What if that is not the 
case? We can choose another a and then do the same test 
again. We could stop after some number of iterations and if 
the result is always 1 in each of them, then we can state with 
very high probability that p is prime. The more iterations 
we do, the higher is the probability that our result is cor¬ 
rect. You can notice that if the method returns composite, 
then the number is sure to be composite, otherwise it will 
be probably prime. 

int Fermat(long long p,int iterations)! 

if(p == 1){ /*! isn’t prime; this conditional 
statement is not required for our given program. 

We write it for maintaining generality.*/ 
return 0; 

I 

int i=0; 

for(i=0;i<iterations;i++){ 

/* choose a random integer between 
1 and p-1 ( inclusive )*/ 

long long a = rand()’/.(p-l)+l; 

/* modulo is the function we developed 
above for modular exponentiation */ 
if(modulo(a,p-l,p) != 1){ 

return 0; /* p is definitely composite */ 

} 

I 

return 1; /* p is probably prime */ 

} 


3.3 Miller-Rabin Primality Test 

Let p be the given number which we have to test for pri¬ 
mality. First we rewrite p-1 as 2d* s . Now we pick some 
a in range [l,n-l] and then check whether a*s = 1 ( mod 


p ) OT a* s * 2r = —lirnodp). If both of them fail, then p 
is definitely composite. Otherwise p is probably prime. We 
can choose another a and repeat the same test. We can stop 
after some fixed number of iterations and claim that either 
p is definitely composite, or it is probably prime. It can 
be shown that for any composite number p, at least (3/4) 
of the numbers less than p will witness p to be composite 
when chosen as a in the above test. Which means that if we 
do 1 iteration, probability that a composite number is re¬ 
turned as prime is (1/4). With k iterations the probability 
of test failing is (l/4)k or 4(-k)- This test is comparatively 
slower compared to Fermat’s test but it doesn’t break down 
for any specific composite numbers and 18-20 iterations is a 
quite good choice for most applications. 

int Miller(long long p,int iteration)! 

if(p<2)! /*this conditional statement is 
not required for our given program. 

We write it for maintaining generality.*/ 
return 0; 

I 

if(p!=2 && py.2==0)! 
return 0; 

I 

long long s=p-l; 
while (s’/.2==0)! 
s/=2; 

I 

int i=0; 

for(i=0;i<iteration;i++)! 

long long a=rand()"/o(p“l) + l,temp=s; 
long long mod=modulo(a,temp,p); 
while(temp!=p-l && mod!=l && mod!=p-l)! 
mod=mulmod(mod,mod,p); 
temp *= 2; 

} 

if(mod!=p-l && temp"/,2==0)! 
return 0; 

} 

L 

return 1; 

} 

3.4 RSA Algorithm 

The algorithm of RSA consists of the following steps: 

1. Select two prime nos p & q such as p!=q 

2. Calculate n as product oi p & q, i.e. n=p*q 

3. Calculate m as product of (p-1) & (q-1) i.e. m=(p-l)(q- 
1) 

4. Select any integer e<m such that it is co-prime to m, 
co-prime means gcd(e,m) = 1. 

5. Calculate d such that (d*e) mod m = 1 , 
i.e. d = e-1 mod m 

6. The public key is e,n The private key is d,n 

So these are the keys, now if you want to perform some 
encryption operation using these keys here are the steps. 



if you have a text P, its encrypted version(cipher text C is) 
C — P^^modn 

To decrpty it back to plain text use P = C^modn 

4. IMPLEMENTATION 

Successful Implementation of above discussed algorithms can 
be achieved in following steps. 

4.1 Generating Two Large Primes 

In the implementation of RSA, the first thing we have to do 
is generate two large prime numbers, p and q. The standard 
way to generate big prime numbers is to take a preselected 
random number of the desired length, apply a Fermat Test 
(best with the base 2 as it can be optimized for speed) and 
then to apply a certain number of Miller-Rabin tests (de¬ 
pending on the length and the allowed error rate like 2“^°° 
) to get a number which is very probably a prime number. 
The pre-selection is done either by test divisions by small 
prime numbers (up to few hundred) or by sieving out primes 
up to 10,000 - 1,000,000 considering many prime candidates 
of the form b+2i{b big, i upto a few thousands). 

Here pre selection of a random prime by first creating an 
array of primes of size 10000 by the Sieve of Eratosthenes^. 
Then generated a random number ‘gen’ with the help of 
randO function such that the number is greater than 1000 
and less than 10000. I have extracted the number at ‘gen’-th 
index position of the array of primes^. 

Now as the extracted number might not be a prime number, 
applied the Fermat Primality Test. Though Fermat is highly 
accurate in practice there are certain composite numbers p 
known as Carmichael numbers for which all values of a<p for 
■>N\dc\i gcd(a,p)=l .(a(p—1))modulo p =1. If apply Fermat’s 
test on a Carmichael number the probability of choosing an 
a such that gcd(a,p) != 1 is very low ( based on the nature 
of Carmichael numbers), and in that case, the Fermat’s test 
will return a wrong result with very high probability. 

For this reason, applied Miller Rabin Primality Test on the 
number in case it satisfies Fermat test. If the number sat¬ 
isfies all the tests, we get a large number with a very high 
probability of being prime. 

Now put the entire set of above operations in a loop such 
that if the number generated does not satisfy the Miller Ra¬ 
bin Primality Test, the above operations will be repeated 
again and this will go on until we generate a prime number. 
As needed to generate two prime numbers, we provide an¬ 
other loop outside this which runs two times and stores the 
generated primes in an array of size 2. 

^all numbers in this array created by sieving may not be 
prime 

^It is customary to use numbers of this range because imple¬ 
mentation is done on a INTEL(R) CDRE^^i5-4210U CPU @ 
1.7 GHz 2.4 Ghz. Otherwise if not confined in given range, 
it was taking a lot of time to decrypt a cipher. For this range, 
the probability that a number in the array is not a prime 
is really very low. But as we increase the upper bound of 
these numbers, this probability increases. So applying Fer¬ 
mat Primality Test and Miller-Rabin Primality Test on the 
number is very essential. 


Table 1: Data Types Used in Implementation 


Variable Name 

DataType 

Use 

p,q 

long long 

Stores the two generated primes 

n 

long long 

Stores product of p and q. 

M 

long long 

Stores the message entered 

phi 

long long 

Stores value of (()(n) = (p-l)(q-l) 

e 

long long 

Stores the public exponent e 

d 

long long 

Stores the private exponent d 

C 

long long 

Stores the Cipher 


4.2 Key Generation 

Calculate n as the product oi p & q, the two generated 
primes. The next thing to do is to generate a number e 
such that e < <(>(«.) and gcd{e, 4>(n)) = 1. Here generated a 
random number less than (j>{n) and checked their gcd. Con¬ 
tinued the process until their gcd is 1. After generating 
e,Calculated the value of d such that d = e~^mod4>(n). The 
public key is {e,n}. The private key is {d,n}. 

4.3 Encryption 

Created a function encrypt () to encrypt a message with 
the help of public key {e,n}. The encrypted keyword C is 
calculated by doing C = M^modn. 

void encrypt ()•[ 

long long i; 

C = 1; 

for(i=0;i< e;i++) 

C=C*My.n; 

C = cy.n; 

printf("\n\tEncrypted keyword : °/,lld",C); 

} 

4.4 Decryption 

Created a function decrypt!) to decrypt a cipher with the 
help of private key{d,n}. The decrypted message M is cal¬ 
culated by doing M = C^modn. 

void decrypt(){ 

long long i; 

M = 1; 

for(i=0;i< d;i++) 

M=M*C"/.n; 

M = M"/.n; 

printf("\n\tDecrypted keyword : °/,lld\n",M); 

} 

5. SIMPLE EXAMPLES 

Example 1: 

62011 

12269 

F(n) phi value = 760738680 
Public Key : {11723299,760812959} 

Private Key : {288096259,760812959} 

Enter The Plain Text : 5321 




Encrypted keyword : 573183424 


70 


Computational Complexity 


Enter the Cipher text : 573183424 
Decrypted keyword : 5321 


Example 2: 


X ♦ 


1000000000 2000000000 3000000000 4000000000 

F{n) 


39703 

66883 

F(n) phi value = 2655349164 
Public Key : {8068769,2655455749} 

Private Key : {149069429,2655455749} 

Enter The Plain Text : 5321 
Encrypted keyword : 2521426694 

Enter the Cipher text : 2521426694 

Decrypted keyword : 5321 

Comment: These two examples show how on entering the 
same message on two different runs, the value of the cipher 
text is different because of the generation of different prime 
numbers p and q and the different public and private expo¬ 
nents e and d, each time the program is run. 

6. PROBLEMS IN IMPLEMENTATION 

The main problem faced is that for a given message M, the 
cipher text C generated is large, nearly a 10 digit number. 
Also, the value of d, i.e., the private exponent is of 10 digits. 
To decrypt M, we have to calculate M = C'^modn. This 
calculation is taking a long time in some cases. 

7. ANALYSIS 

The time taken on computing is not fixed it changes in each 
& every run. After performing a statistical test of encrypting 
a plain text (which is 25000) & decrypting it time taken is 
noted 


Figure 1: Computational Complexity (Graph) 
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Value of F(n) 

Time (in sec.) 

1614044880 

16.5 

946335840 

21.5 

2186888896 

60.0 

1927086672 

17.6 

1595209116 

18.8 

1424163096 

9.4 

2917216608 

28.2 


Table 2: Computational Complexity (Data) 


Plotting the data it is extremely clear that computational 
time of phi function, encryption & decryption of plain text & 
cipher text respectively is not predictable. Some runs of test 
with takes more time, some takes less time while complexity 
of computations remaining approximately Rxed. 
















